High DLA-2390-1 1 CVE

ruby-json-jwt - security update

Published Oct 1, 2020 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

Release	Package	Fixed in
Debian · 9	ruby-json-jwt	1.6.2-1+deb9u2

Vulnerabilities 1

High 7.5

CVE-2019-18848

JSON-jwt Gem lacked element count during splitting of JWE string

The json-jwt gem before 1.11.0 for Ruby lacks an element count during the splitting of a JWE string.

json-jwt ruby-json-jwt ruby-json-jwt Debian Ubuntu RubyGems

Nov 12, 2019